Tag Info

Hot answers tagged

10

The only overhead incurred will be the few bytes taken up in applicationHost.config to define the Application Pools and any non-default settings they may have. If you have a 1000 unused app pools it might improve the time it takes to apply on-the-fly configuration changes to IIS (since there's less XML for the WAS service to parse), but with 5 App Pools I ...


6

Start -> Run... -> mmc.exe, add the Local Users and Groups mmc snapin. Oh, since this is a domain controller, you don't have local users and groups any more. You didn't specify but I see that you've installed AD DS in your screenshot... Other than the Directory Services Restore Mode account, there are no "local" accounts on a domain controller. Only ...


6

Never put applications on domain controllers if you can help it. There are no local accounts on DCs, so any principal with machine-level rights has domain-level rights. (There's no such thing as a "secondary server" in AD.)


5

It is generally a really bad idea to combine different roles with domain controllers - there are security ramifications on most everything. The whole SBS market revolves around that fact. If at all possible you should look at reprovisioning your existing machines even if you can't upgrade the physical hardware underneath. Most any of the major vendors will ...


5

I've had a similar issue, and there are plenty of other suffers out there too. There's a bug in CU2 that can cause problems with the install of the ECP site, which is what bit me. Assuming you have both the CAS and database server roles installed on this Exchange server then it may not be enough to simply delete and re-create the CAS ECP virtual directory ...


5

I would recommend replacing it before it's expiry. A certificate will usually expire on the morning of the expiry date. Eg. A certificate expiring on 3rd September 2013 wil usually no longer be valid from midnight 2nd September 2013 (local server time.) I'd also recommend looking at the peak usage of your web site to find the best time to replace the ...


5

The trick is to remove 'default.aspx' if it is already anywhere in the list: $filter = "system.webserver/defaultdocument/files" $site = "IIS:\sites\Default Web Site\MyWebSite" $file = "default.aspx" if ((Get-WebConfiguration $filter/* "$site" | where {$_.value -eq $file}).length -eq 1) { Remove-WebconfigurationProperty $filter "$site" -name collection ...


5

It is just a hole finder script. The request made are tipically the following ones, if your servers answers all with a 404 error, you do not nothing to worry about. 111.221.1.140 - - [20/Nov/2013:10:15:56 +0000] "GET //xampp/phpmyadmin/scripts/setup.php HTTP/1.1" 404 1787 "-" "-" 111.221.1.140 - - [20/Nov/2013:10:15:55 +0000] "GET //websql/scripts/setup.php ...


5

Heartbleed allows memory to be exposed from the server on which [a vulnerable version of] OpenSSL is running, during a TLS connection. So, for heartbleed to be exploitable, a server must both be running a vulnerable version of OpenSSL AND accept TLS connections. Therefore, in Scenario 1, you'd be at risk of having the memory of your load balancer being ...


5

32bit Operating system with 16Gb ram will effectively leave 12Gb's unused. The upgrade to 64bit OS should defenitly be considered. Use of the PAE switch (Physical Adress Extension) could offer a temporary fix. For info with regards to max memory which a OS can use along with the PAE switch info look at: ...


5

Using Server Name Indication requires IIS 8.0. It was not supported in prior versions of IIS. To resolve the problem, do one of the following: Update to IIS 8.0 (and Server 2012). Use a web server other than IIS. Use unique IP addresses for each SSL-enabled web site.


4

New Relic says themselves that they use the .Net profiling API. https://docs.newrelic.com/docs/dotnet/new-relic-net-installation#trouble The .NET agent instruments application and system code using BCI (byte code injection). This is done by registering the New Relic agent with the CLR (Common Language Runtime) as a "profiler." The CLR calls out to ...


3

Assuming you have the IIS admin scripts installed, from a command prompt with elevated privileges: cscript adsutil.vbs GET W3SVC/1/ServerBindings This assumes the ID of your default web site is 1. The output would be something like: Microsoft (R) Windows Script Host Version 5.8 Copyright (C) Microsoft Corporation. All rights reserved. ServerBindings ...


3

Well, simple - first request Triggers compile of the Website including all pages. Game over. Thousands of files in one compile run. Dead. ASP.NET is not made for this type of Approach. Dont put physical files there. Use a CMS like Approach.


3

You need to precompile your site when you build it. http://msdn.microsoft.com/en-us/library/ms229863(v=vs.100).aspx Web Deployment Overview for Visual Studio and ASP.NET http://msdn.microsoft.com/en-us/library/dd394698.aspx#basic_deployment_tasks Precompile the project. By default, web site projects are not precompiled, and .aspx and .ascx pages are ...


3

Mathias, All you need to do is open IIS and stop the individual vSMTP01, but really in your case you'd want to pause it. In IIS Manager, expand the local computer, right-click the SMTP virtual server, and click Pause. Pausing prevents new client connections, but it enables the virtual server to continue processing existing client connections and ...


3

This post escalated while I wrote it, here's the take-away bullets TL;DR Increase the size of your page file (shooting from the hip I'd say to at least 40GB, much more if you can afford the disk capacity and I/O, but read the article at the bottom) Increase the frequentHitThreshold and frequentHitTimePeriod values(review the Web Service Cache performance ...


3

It depends on what you mean by primary, and the configuration of NLB or DFSR. If you mean primary server for servicing web clients, then it depends on the NLB configuration. Usually no because the default configuration for NLB is round-robin. But a fail-over configuration is possibly. If you mean primary server for maintaining the flat files, then it ...


3

I could reproduce this behavior on IIS 8.5, it looks like a bug to me. Using WMI worked for me in the same PowerShell session where Get-ChildItem returned the out-dated PID (gwmi -NS 'root\WebAdministration' -class 'WorkerProcess' | ? AppPoolName -eq $pool | Select -First 1).ProcessId This returned the correct pid for the first WorkerProcess


3

certutil -p <PFXPassword> -importPFX <FileLocation.pfx> Example: certutil -p xyz -importPFX C:\cert.pfx


3

You can get a 403 error for many reasons. See here: http://en.wikipedia.org/wiki/HTTP_403 Are you running IIS on Windows Server? Since you're running IIS, I wonder if it could be one of these problems: 403.9 - Too many users. 403.15 - Client Access Licenses exceeded. I would have a look in the even log to get further information. Can your run your ...


3

Each web site (and potentially each web application) is IIS is linked to an application pool that holds configuration of the hosting process. Several of these properties are linked to how the process is recycled (terminated and restarted). By default, each application will be terminated every 1740 minutes (29 hours) but it can also be recycled if it's ...


3

HOST is a catch all for several SPNs. These are determined by the field SPNmappings in CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,DC=MyDC,DC=com in your AD using ADSIEdit.msc See this site for more information The problem with duplicate SPNs – alternate working title… KB321044++


3

IIS logs won't help you here, since the SSL connection is negotiated before any HTTP/application layer traffic starts flowing. But what you can do is: C:\Windows\system32>netsh trace start capture=yes Trace configuration: ------------------------------------------------------------------- Status: Running Trace File: ...


3

On modern versions of IIS, start the IIS Manager console, click your server in the left pane, then double click "Server Certificates" in the right pane. Now you'll notice in the far right pane, you have an option to "Create Certificate Request" and "Complete Certificate Request". So once you have created the CSR, take it to the Certificate Authority and ...


3

You can use the -locale:USAcommand-line flag to tell logparser that the dates in the log are in US format.


3

No, you cannot set an empty PIN on a Windows 8 Virtual Smart Card. At first I said "having a smart card with no PIN defeats the purpose." But that was too flippant of me. I have Bitlocker enabled on my laptop with a TPM, and I don't need to enter a PIN manually every time I boot up to unlock it. But the fact remains that you can't set an empty PIN on a ...


3

The Not enough storage available error has nothing to do with disk storage. It is about internal memory. This error is quite easy to reproduce. Simply select a bunch of large files (images or DLL's or whatever), right-click and use the open-with option to open them all with Notepad. This should eat up allot of internal memory. When the swap-file nears it's ...



Only top voted, non community-wiki answers of a minimum length are eligible